Lucene search

K
osvGoogleOSV:GHSA-FCGM-62P3-F7CM
HistoryMay 17, 2022 - 2:37 a.m.

phpMyAdmin Local file exposure

2022-05-1702:37:25
Google
osv.dev
5
phpmyadmin
local file exposure
load local infile
server
database system
vulnerability
4.6.x
4.4.x
4.0.x

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

43.3%

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.